Lucene search
Mozilla FoundationMFSA2006-59HistorySep 14, 2006 - 12:00 a.m.
Concurrency-related vulnerability — Mozilla
2006-09-1400:00:00
Mozilla Foundation
www.mozilla.org
17
CVSS2
7.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
EPSS
0.966
Percentile
99.6%
Jonathan Watt and Michal Zalewski independently reported timing dependent testcases that trigger crashes at the same place during text display. We have seen no demonstration that these crashes could be reliably exploited, but they do show evidence of memory corruption so we presume they could be.
Affected configurations
Node
mozillafirefoxRange<1.5.0.7
ORmozillaseamonkeyRange<1.0.5
ORmozillathunderbirdRange<1.5.0.7
Related
cvelist
cvelist
CVE-2006-4253
2006-08-21 20:00:00
nvd
nvd
CVE-2006-4253
2006-08-21 20:04:00
CVE-2006-4261
2006-08-21 20:04:00
cve
cve
CVE-2006-4253
2006-08-21 20:04:00
CVE-2006-4261
2006-08-21 20:04:00
debiancve
debiancve
CVE-2006-4253
2006-08-21 20:04:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:13:11
ubuntucve
ubuntucve
CVE-2006-4253
2006-08-21 00:00:00
nessus
nessus
Fedora Core 5 : thunderbird-1.5.0.7-1.fc5 (2006-977)
2007-01-17 00:00:00
GLSA-200610-04 : SeaMonkey: Multiple vulnerabilities
2006-10-20 00:00:00
SeaMonkey < 1.0.5 Multiple Vulnerabilities
2006-09-16 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200610-04 (seamonkey)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200610-04 (seamonkey)
2008-09-24 00:00:00
Ubuntu: Security Advisory (USN-352-1)
2022-08-26 00:00:00
gentoo
gentoo
Seamonkey: Multiple vulnerabilities
2006-10-16 00:00:00
Mozilla Thunderbird: Multiple vulnerabilities
2006-10-04 00:00:00
Mozilla Firefox: Multiple vulnerabilities
2006-09-28 00:00:00
redhat
redhat
(RHSA-2006:0676) seamonkey security update
2006-09-15 00:00:00
(RHSA-2006:0677) thunderbird security update
2006-09-15 00:00:00
(RHSA-2006:0675) firefox security update
2006-09-15 00:00:00
centos
centos
devhelp, seamonkey security update
2006-09-15 14:57:11
thunderbird security update
2006-09-15 14:57:35
seamonkey security update
2006-09-17 23:20:54
oraclelinux
oraclelinux
Critical thunderbird security update
2006-12-07 00:00:00
Critical seamonkey security update
2006-12-07 00:00:00
Critical firefox security update
2006-12-07 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2006-09-25 00:00:00
firefox vulnerabilities
2006-09-23 00:00:00
Thunderbird vulnerabilities
2006-09-22 00:00:00
suse
suse
remote code execution in MozillaFirefox,MozillaThunderbird,seamonkey
2006-09-22 13:02:47
freebsd
freebsd
mozilla -- multiple vulnerabilities
2006-09-14 00:00:00
cert
cert
OpenSSL SSLv2 client code fails to properly check for NULL
2006-09-28 00:00:00
OpenSSL SSL_get_shared_ciphers() vulnerable to buffer overflow
2006-09-28 00:00:00
CVSS2
7.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
EPSS
0.966
Percentile
99.6%
Related for MFSA2006-59